the flush causes the bean being saved a second time, since hibernate assumes that the entity is dirty and schedules a save operation. For this save the user would need the UPDATE permission, and the save operation fails.

Related issues

Related to Edit - feature request #4305: newly created entities must stay editable even if a user only has the permission to create them